Binance has restored withdrawals for additional crypto assets including DOGE, ZEC, TON and SUI following the October 29, 2026 security breach that affected roughly $6.34 billion in cryptocurrency assets.
On November 1, 2026, Binance began reopening withdrawal rails in phases. Earlier waves covered Bitcoin, Ethereum, BNB, XRP, and Dogecoin, as well as Base, Optimism, Arbitrum, Tron, Solana, Polygon, and Avalanche C-Chain. In the latest update, ZEC withdrawals are live on the Zcash network, while USDT and GRAM are available on TON, and SUI withdrawals run on the Sui network. Binance said remaining assets and networks will return after security checks, and deposits remained open during the freeze.
Dogecoin contributor Mishaboar cautioned DOGE holders to select the native Dogecoin network when withdrawing from Binance, rather than Binance-Pegged DOGE on the BNB Smart Chain. He also urged users to verify wallet backups and security arrangements before moving funds, writing, 'My recommendation remains the same: withdraw when and if you can, without rushing.'
Binance's preliminary findings detail a sophisticated attack. Attackers targeted engineers through malicious software distributed via deceptive recruitment activities and compromised development tools, including a fraudulent job interview and a modified developer tool installer. They then exploited an internal artificial intelligence tool and stolen deployment credentials to access wallet-signing infrastructure.
Binance reported that approximately $2.85 billion in stolen assets had been intercepted or frozen, and 98% of affected token assets were restored as of October 31. A separate Binance update said about 95% of the lost $6.3 billion had been settled, with company reserves and the SAFU emergency fund covering the recovery. Investigators closed identified attack entry points and engaged independent cybersecurity specialists.
U.S. agencies have also joined the case. The FBI linked the theft to North Korean hackers known as TraderTraitor, working with the U.S. Secret Service and IRS Criminal Investigation. Agents said attackers swapped a large share of the stolen funds into Ether and may continue laundering through DeFi and instant swap tools, while THORNode operators and other firms were asked to halt deals tied to the stolen funds.
